Category: CYBER SECURITY

Meta has issued a warning to all Windows users to update their WhatsApp app to the latest version after a serious security vulnerability was discovered.

Microsoft has released its April 2025 Patch Tuesday update, which brings fixes for 134 different security flaws.

Security experts have uncovered critical flaws in the Nissan Leaf’s mobile app that allowed remote access to vehicle functions and personal data without any password, raising serious concerns about car cybersecurity.

Spanish police have arrested six people linked to a massive cryptocurrency investment scam that used AI-generated deepfake videos featuring celebrities to trick victims into investing.

A newly discovered vulnerability in the popular file archiver WinRAR could allow attackers to bypass Windows' Mark of the Web (MotW) security warnings and execute malicious code on targeted systems.

A hacker has broken into the private code repositories of Europcar Mobility Group, a major global car rental company, and stolen important information, including app source code and some customer data.

The Drug Enforcement Administration (DEA) has warned the public about a scam where fraudsters pretend to be DEA agents.

A security flaw in Verizon’s Call Filter feature allowed users to access incoming call logs of other Verizon customers through an unprotected API request.

Cybersecurity researcher Jeremiah Fowler recently discovered an unprotected database containing nearly 100,000 records from GenNomis by AI-NOMIS, a South Korean AI company specializing in face-swapping and AI-generated adult content.

The U.S. Department of Justice (DOJ) has seized over $8.2 million in USDT (Tether) cryptocurrency stolen through romance scams, a type of fraud where victims are tricked into making fake investments.

A recent security breach at Oracle Health has led to the theft of patient data from legacy servers, impacting multiple U.S. healthcare organizations and hospitals.

Mozilla has released Firefox 136.0.4 to fix a critical security vulnerability that allows attackers to bypass the browser’s sandbox protections on Windows.

The UK Information Commissioner's Office (ICO) has levied a £3.07 million ($3.95 million) fine against Advanced Computer Software Group Ltd for a ransomware attack in 2022 that exposed the sensitive personal data of 79,404 individuals, including NHS patients.

Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers, evidence suggests that account data for 6 million users may have been compromised.

Google has released a security update to fix a critical Chrome zero-day vulnerability (CVE-2025-2783) that was actively exploited in cyber-espionage attacks.

An Amazon S3 storage instance containing sensitive personal and financial records was found publicly accessible without password protection or encryption.

A cyber threat actor, EncryptHub, has been linked to recent Windows zero-day attacks, exploiting a critical Microsoft Management Console (MMC) vulnerability that Microsoft patched this month.

The FBI is warning internet users about fake online document converters that are being used to steal personal information and, in some cases, deploy ransomware on victims’ devices.

Oracle has denied allegations of a security breach after a threat actor claimed to be selling six million data records allegedly stolen from Oracle Cloud’s federated SSO login servers.

Researchers have identified Coinbase as the main target in a GitHub Actions supply chain attack that exposed secrets in hundreds of repositories.